Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a383030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a343637383a383030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          yn+EvmavHndUtalwoSiEONh49OcYaSyWAPgLia2+I+0=
Subject key identifier:   0B:46:05:19:34:DA:3F:1F:F3:37:2F:7B:6B:62:15:A0:4E:FD:BC:D7
Certificate issuer:       /CN=49AA284BEBE852D687076D4B25B70312FE52274D
Certificate serial:       58860E93CD6AB98F50C996AFA84FB279B098B723
Authority key identifier: 49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a383030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Wed 03 Apr 2024 19:00:02 +0000
ROA not before:           Wed 03 Apr 2024 18:55:02 +0000
ROA not after:            Thu 03 Apr 2025 19:00:02 +0000
asID:                     262494
IP address blocks:        2804:4678:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:86:0e:93:cd:6a:b9:8f:50:c9:96:af:a8:4f:b2:79:b0:98:b7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AA284BEBE852D687076D4B25B70312FE52274D
        Validity
            Not Before: Apr  3 18:55:02 2024 GMT
            Not After : Apr  3 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:11:d5:f8:d5:52:9e:62:f7:b9:0f:08:f8:
                    12:26:66:d3:44:df:d2:72:ad:47:14:f3:2d:08:78:
                    ed:2a:11:03:22:a9:76:2f:cc:83:8b:6c:52:e3:f1:
                    9b:05:65:63:1e:b7:ec:d0:61:cc:54:0f:7e:a8:df:
                    b6:44:90:47:ea:34:17:fd:a7:99:6d:60:96:bc:b5:
                    9e:5d:e7:c8:9b:55:4a:ab:ce:36:80:28:eb:78:58:
                    f5:44:f3:8e:4d:f2:cf:5c:de:6e:e2:6a:1b:4f:3c:
                    23:2a:1a:d5:80:a9:1b:22:1a:bf:64:e0:5f:dc:60:
                    94:60:1f:90:be:e3:62:d7:45:d9:d7:0c:3b:f4:85:
                    c8:6c:85:77:a8:83:81:42:40:bd:62:e2:41:b8:9d:
                    83:fa:72:4b:05:53:81:79:1c:24:c9:a0:1a:49:9e:
                    35:bb:ef:a3:b2:8b:85:5f:3b:ce:92:47:39:9e:3a:
                    78:07:63:95:18:57:8c:8c:c2:9b:93:8d:69:c3:ba:
                    62:29:68:50:ae:70:bd:95:f9:e8:45:a5:29:34:3a:
                    63:b5:89:1d:3d:29:41:dc:63:c3:cc:3e:63:10:91:
                    9d:7b:d6:2d:bb:c5:8f:50:5e:14:c8:30:49:ab:6f:
                    57:4d:fd:90:92:51:6d:39:92:3d:31:9c:81:97:f5:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:05:19:34:DA:3F:1F:F3:37:2F:7B:6B:62:15:A0:4E:FD:BC:D7
            X509v3 Authority Key Identifier:
                keyid:49:AA:28:4B:EB:E8:52:D6:87:07:6D:4B:25:B7:03:12:FE:52:27:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/49AA284BEBE852D687076D4B25B70312FE52274D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49AA284BEBE852D687076D4B25B70312FE52274D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/1/323830343a343637383a383030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:64:4e:ee:6c:62:0a:d3:45:b6:15:cf:3c:3a:eb:b7:8d:
         a6:0d:d4:9a:c7:ad:b0:c2:69:11:df:38:85:2a:43:51:65:3c:
         24:99:18:5b:c3:12:be:d2:50:08:3d:f9:fb:49:69:40:cf:fc:
         cf:8c:21:cd:56:f3:87:6e:1e:38:1c:c7:1e:87:94:69:44:96:
         40:c2:8c:e1:96:d2:36:5b:e5:27:d5:b3:8f:3c:6f:9c:3e:36:
         f5:06:cf:ae:58:7c:9c:1a:fa:d1:34:fd:d6:11:9d:2b:59:4f:
         f6:4a:b7:35:d4:00:e1:26:0b:95:23:88:02:b4:b8:54:07:dc:
         35:68:ba:90:1d:39:4b:eb:01:0d:83:ed:b5:2e:da:c1:bc:9b:
         de:a1:c7:81:fa:45:d1:c9:d7:e3:d3:94:f8:59:1a:90:7b:d6:
         6d:a1:9a:e6:d0:17:5d:d7:d0:99:d6:7a:38:14:db:f0:dd:1e:
         cd:6d:5c:fa:d3:2e:a8:1b:ef:10:9f:98:d6:73:61:5e:4f:e0:
         8c:76:82:e7:2d:02:1b:3a:33:12:f3:a0:53:39:43:d1:e3:c9:
         5a:19:42:17:90:c6:1f:24:d9:81:22:5d:0f:d5:97:5c:b6:3c:
         58:43:9e:65:e7:c5:dc:fb:ab:37:58:3d:51:db:e9:12:59:d9:
         27:b5:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----